CVE-2010-4686

CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service (memory consumption) by sending this traffic over a long duration, aka Bug ID CSCtb47950.

• CWE-400

• http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdfVendor Advisory
• http://www.securityfocus.com/bid/45769Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64585Third Party Advisory, VDB Entry
• http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdfVendor Advisory
• http://www.securityfocus.com/bid/45769Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64585Third Party Advisory, VDB Entry

Published

Jan 7, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4680The WebVPN implementation on Cisco Adaptive Security Applian…
• CVE-2010-4681Unspecified vulnerability on Cisco Adaptive Security Applian…
• CVE-2010-4682Memory leak on Cisco Adaptive Security Appliances (ASA) 5500…
• CVE-2010-4683Memory leak in Cisco IOS before 15.0(1)XA5 might allow remot…
• CVE-2010-4684Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is …
• CVE-2010-4685Cisco IOS before 15.0(1)XA1 does not clear the public key ca…
• CVE-2010-4687STCAPP (aka the SCCP telephony control application) on Cisco…
• CVE-2010-4688Unspecified vulnerability in the SIP inspection feature on C…
• CVE-2010-4689Cisco Adaptive Security Appliances (ASA) 5500 series devices…
• CVE-2010-4690The Mobile User Security (MUS) service on Cisco Adaptive Sec…
• CVE-2010-4691Unspecified vulnerability on Cisco Adaptive Security Applian…
• CVE-2010-4692Unspecified vulnerability on Cisco Adaptive Security Applian…